Security

Preview safeguards

The site applies restrictive browser security headers, same-origin intake controls, bounded request sizes, server-side validation, parameterized database queries, per-email rate limiting, and minimal data collection. The hosted preview is restricted to its owner.

Scope

These safeguards cover this website preview only. They are not a certification of the future customer player, catalog operations, rights systems, or provider integrations.

Reporting

Do not include credentials, personal data, or destructive exploit details in an intake request. During private preview, security findings are handled directly by the owner. A dedicated coordinated-disclosure channel and scope will be published before public access.